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WHICHEVER IS LONGER, FROM THE MAILING DATE OF THIS COMMUNICATION. 
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* See the attached detailed Office action for a list of the certified copies not received. 



Attachment(s) 

1) ^ Notice of References Cited (PTO-892) 

2) n Notice of Drafts person's Patent Drawing Review (PTO-948) 

3) 13 Information Disclosure Statement(s) (PTO-1449 or PTO/SB/08) 

Paper No(s)/Mail Date 5/22/04.6/1 8A)4. . 



4) D Interview Summary (PTO-413) 

Paper No(s)/Mail Date. . 

5) [H Notice of Informal Patent Application (PTO-152) 

6) □ Other: . 



U.S. Patent and Trademark Office 
PTOL-326 (Rev. 7-05) 



Office Action Summary 



Part of Paper No./Mail Date 131020051 



Application/Control Number: 10/082.235 Page 2 

Art Unit: 21 32 

DETAILED ACTION 
Claim Rejections - 35 USC § 102 

1 . The following is a quotation of the appropriate paragraphs of 35 U.S.C. 102 that 
form the basis for the rejections under this section made in this Office action: 

A person shall be entitled to a patent unless - 

(a) the invention was known or used by others In this country, or patented or described in a printed 
publication in this or a foreign country, before the invention thereof by the applicant for a patent. 

2. Claim ll^ejected under 35 U,S.C. 102(a) as being anticipated by U.S. Patent 
6208720 B1 to Curtis et aL(hereinafter Curtis). 

3. Regarding Claim 1 , Curtis discloses the providing a number of alert indications 
containing information related to the incident see Fig. 4 item 408; comparing one or 
more alert indications to a set of rules and declaring a incident if a match is found see 
Fig. 4 item 424; comparing one or more alert indications to a decision table and 
remembering alert indication and comparing to a correlation data see Fig. 2 item 214- 
220; declaring an incident based on threshold value see Fig. 4 item 414-416. 

4. Regarding Claim 2, Curtis discloses the defined default threshold value is level of 
severity in alert indications see Col 18 Ln 35-44. 

5. Regarding Claim 3, 1 1 , Curtis discloses the incident ticket for each incident 
having description of incident, a conclusion based on the incident, any actions 
responsive to the conclusion, a detail of the alert indications associated with the 
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incident, tracking rules which Identify one or more alert indications see Col 25 Ln 48-59 
& Col 24 Ln 28-41 & Col 18 Ln 45-59. 

6. Regarding Claim 4, Curtis discloses tracking further based on alert indications 
and associating tracking rules along with it see Col 22 Ln 65- Col 23 Ln 21 & Col 22 Ln 
3-11. 

7. Regarding Claim 5, Curtis discloses the associating step being performed after 
passing threshold value and table containing categories and alert codes see Col 18 Ln 
13-29. 

8. Regarding Claim 6, 21 , Curtis discloses the updating of tracking rules see Col 19 
Ln 23-40. 

9. Regarding Claim 7, Curtis discloses the normalizing of alert infornration see Fig. 
1 Item 124. 

10. Regarding Claim 8, 16, 20 Curtis discloses the plurality of devices supplying the 
alert indications see Col 7 Ln 1-20 & Fig. 3 Item 152a-n. 

1 1 . Regarding Claim 9, Curtis discloses the default value being derived from a set of 
rules see Col 13 Ln 43-55. 
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12. Regarding Claim 10, Curtis discloses the a decision table and set of correlation 
data that identifies patterns and declaring a incident if a match occurs see Col 10 Ln 24- 
30 & Col 9 Ln 45-53; a set of rules containing a number of queries and matching rules 
and inputted alert indications see Col 1 1 Ln 20-49; set of default standards specifying 
minimum value declare an incident see Col 18 Ln 44-59. 

13. Regarding Claim 12, 19 Curtis discloses the filtering out inputted indication that 
don't meet threshold value and comparing information to rules see Col 18 Ln 13-35. 

14. Regarding Claim 13-14, Curtis discloses the database storing declared incidents 
see Fig. 1 item 130. 

15. Regarding Claim 15, Curtis discloses the linking users via global network see 
Fig. 1 item 102, 104.106. 

16. Regarding Claim 16, Curtis discloses the displaying of incidents see Col 1 1 Ln 
39-49 & Fig. 3 item 1 52a-n. 

17. Regarding Claim 17, Curtis discloses the combination of customized and default 
rules see Col 3 Ln 6-23. 
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18. Regarding Claim 22, Curtis discloses the updating through human based 
observations see Col 11 Ln 31-38. 

Conclusion 

1 9. The prior art made of record and not relied upon is considered pertinent to 
applicant's disclosure. 

U.S. Patent Publication 2002/0083168 A1 to Sweeney et al. 

20. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Venkatanarayanan Perungavoor whose telephone 
number is 571-272-7213. The examiner can normally be reached on 8-4:30. If attempts 
to reach the examiner by telephone are unsuccessful, the examiner's supervisor, 
Gilberto Ban-on can be reached on 571-272-3799. The fax phone number for the 
organization where this application or proceeding is assigned is 571-273-8300. 

21 . Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). 
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